Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/323830343a326162633a633030303a3a2f33342d3334203d3e20323634303931.roa
File:                     323830343a326162633a633030303a3a2f33342d3334203d3e20323634303931.roa (raw, json)
Hash identifier:          mERCOX/6/ymhpfgx+nl5BoOx5D5Q4GucW0444exe/P4=
Subject key identifier:   38:7A:15:4A:7E:E7:06:67:83:00:59:88:EE:56:02:D0:F2:6E:33:82
Certificate issuer:       /CN=A6768A6B148248844D8E04551B1998D03AB86D3D
Certificate serial:       1B8DA741186DC55C8FDE4EC7D61621B0CB844F4A
Authority key identifier: A6:76:8A:6B:14:82:48:84:4D:8E:04:55:1B:19:98:D0:3A:B8:6D:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A6768A6B148248844D8E04551B1998D03AB86D3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/323830343a326162633a633030303a3a2f33342d3334203d3e20323634303931.roa
Signing time:             Wed 18 Jan 2023 04:06:55 +0000
ROA not before:           Wed 18 Jan 2023 04:01:55 +0000
ROA not after:            Wed 17 Jan 2024 04:06:55 +0000
asID:                     264091
IP address blocks:        2804:2abc:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8d:a7:41:18:6d:c5:5c:8f:de:4e:c7:d6:16:21:b0:cb:84:4f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6768A6B148248844D8E04551B1998D03AB86D3D
        Validity
            Not Before: Jan 18 04:01:55 2023 GMT
            Not After : Jan 17 04:06:55 2024 GMT
        Subject: CN=387A154A7EE7066783005988EE5602D0F26E3382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:09:4c:40:4a:8d:91:14:bd:75:67:93:39:78:
                    36:81:88:86:fc:a6:d6:1c:de:04:01:51:c6:27:6e:
                    88:fd:5c:ee:ae:6b:c7:9a:d0:fe:84:f9:08:88:54:
                    28:2e:89:09:8b:46:55:48:82:12:9f:2b:26:cf:e4:
                    5a:d1:b7:a2:b4:ec:0f:00:38:ea:a8:58:ed:fb:c6:
                    ad:ec:3f:03:9e:f0:de:1e:c2:f5:45:49:85:60:71:
                    44:1e:11:5a:11:6f:b9:91:a9:c6:c6:3a:f1:7e:41:
                    09:e7:e7:84:97:8b:97:ca:0a:6c:da:f4:64:52:96:
                    1e:fe:21:c2:ca:8d:d5:c2:27:c4:cd:fe:0d:80:dc:
                    3f:54:d4:01:9a:25:7d:c3:d9:cd:1f:4b:be:96:08:
                    4f:53:47:38:1e:c4:84:a9:f8:74:39:b1:7d:5e:07:
                    c6:19:18:fa:26:c0:af:a3:86:72:c9:d4:b4:3e:32:
                    e8:68:08:3e:da:93:33:20:b2:6f:14:71:52:ec:8b:
                    c4:67:ef:52:d6:88:eb:f1:7b:ef:e8:bb:eb:3e:06:
                    60:26:f7:9a:3d:74:94:87:f1:c2:25:42:5c:a4:23:
                    37:be:c4:26:2d:43:60:b4:a3:d2:d6:26:4f:f6:8b:
                    e7:10:e9:75:2c:a5:65:b5:5c:db:e0:6a:47:09:8c:
                    dc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7A:15:4A:7E:E7:06:67:83:00:59:88:EE:56:02:D0:F2:6E:33:82
            X509v3 Authority Key Identifier:
                keyid:A6:76:8A:6B:14:82:48:84:4D:8E:04:55:1B:19:98:D0:3A:B8:6D:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/A6768A6B148248844D8E04551B1998D03AB86D3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A6768A6B148248844D8E04551B1998D03AB86D3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKHFq33EjtUpErGNPXYxZWTXAjyBae6MUTnsi7Un7pa5/0/323830343a326162633a633030303a3a2f33342d3334203d3e20323634303931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2abc:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         03:f3:bd:e1:b8:a2:e1:be:d8:b2:36:3e:d5:0b:b5:e6:c8:ad:
         33:57:5b:92:5f:91:80:d6:29:3f:ca:5f:37:e5:57:49:34:fb:
         3c:12:16:08:3b:6b:e9:fd:85:c2:95:60:89:7a:46:9e:3f:d6:
         fa:3b:bc:a8:16:05:f4:ec:5b:05:db:c4:7c:51:9c:b8:9e:30:
         1b:db:b1:69:95:d0:47:6f:d5:ef:b6:8f:82:2f:17:e1:3e:31:
         84:68:9b:9f:36:c5:16:f8:96:64:44:ed:b3:04:f3:e8:d2:ff:
         cf:fb:49:79:b0:9b:e7:95:87:27:53:c5:b1:bf:c6:82:67:d9:
         84:da:ff:26:e0:b3:81:fe:35:4f:61:5e:c3:bd:52:6a:5e:4b:
         c2:c3:62:e0:8b:39:d6:f0:a0:51:2c:c8:66:97:c1:1c:38:81:
         1a:8c:9f:38:7c:69:b2:0b:35:b5:e1:4d:58:f9:f1:4e:f6:96:
         2f:ef:85:10:66:fa:dd:cd:73:65:13:86:e6:b6:53:e3:6a:ad:
         e8:4b:a5:55:be:99:1f:c7:72:20:48:6e:ce:58:8b:7a:bb:b3:
         41:b4:d2:3d:03:98:21:a4:0e:08:4c:71:f2:4e:4c:28:49:71:
         c7:d9:a8:73:91:55:a7:db:2f:ca:06:6d:35:17:21:de:7a:b4:
         3e:0f:1a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org